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This listing of claims will replace all prior versions, and listings, of claims 
in the application: 

Listing of Claims 

Claim 1 (Original); A method comprising; 

minting a stick of electronic assets by digitally signing with an issuer's 
signature a composite of user-provided data items including a user identity, a 
bottom asset from a bottom of the stick, and a length of the stick; 

10 spending one or more assets from the stick at one or more vendors, wherein 

11 each expenditure with a particular vendor involves digitally signing with a user's 

12 signature a first asset from the stick to be spent and passing the user-signed first 
n asset along with the issuer-signed composite to the particular vendor for 
H verification and subsequently passing any additional assets to be spent without user 
is signature to the particular vendor; and 
to depositing one or more assets collected by the particular vendor by digitally 
17 signing with the particular vendor's signature a composite of data items including 
]g the user-signed first asset and a last asset spent by the user from the stick and 

19 passing the vendor-signed composite along with the issuer-signed composite to the 

20 issuer. 

21 

22 Claim 2 (Original): A method as recited in claim 1, further comprising 

23 storing the stick of electronic assets in a tamper-resistant electronic wallet. 

24 
25 
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Claim 3 (Original): A method as recited in claim 1, further comprising 
storing the stick of electronic assets in an electronic wallet constructed with a 
secure-processor architecture. 

Claim 4 (Original): A method as recited in claim 1, wherein the minting 
comprises minting the stick of assets using a blind signature protocol* 

Claim 5 (Original): A method as recited in claim 1, wherein the spending 
comprises: 

concatenating a vendor identity with the first asset from the stick to form a 
payment request; 

signing the payment request with a signature of the user: 

submitting the user-signed payment request along with the issuer-signed 
withdrawal request to the vendor, 

accepting the first asset as payment in an event that the user and the issuer 
are verified; and 

subsequently passing any additional assets from the stick as payment to the 
vendor without digitally signing them with the user's signature; 

Claim 6 (Original): A method comprising: 

minting a stick of electronic assets by digitally signing with an issuer's 
signature a composite of user-provided data items including a user identity, a 
bottom asset from a bottom of the stick, and a length of the stick; 

spending one or more assets from the stick at one or more vendors, wherein 
each expenditure with a particular vendor involves digitally signing with a user's 
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signature a first asset from the stick to be spent and passing the user-signed first 
asset along with the issuer-signed composite to the particular vendor for 
verification and subsequently passing any additional assets to be spent without user 
signature to the particular vendor; and 

depositing one or more assets collected by the particular vendor by digitally 
signing with the particular vendor's signature a composite of data items including 
the user-signed first asset and a last asset spent by the user from the stick and 
passing the vendor-signed composite along with the issuer-signed composite to the 
issuer, wherein the depositing comprises: 

concatenating the user-signed first asset SufCj), a last asset spent from the 
stick Cfc, and a run length RL of assets beginning with the first asset Cj and ending 
with the last asset Ck to form a deposit request; 

signing the deposit request with a signature of the vendor: 

S y (Su(Cj), Ck, RL) 

submitting the vendor-signed deposit request along with the issuer-signed 
withdrawal request to the issuer; and 

crediting a vendor account with the run of assets in an event that the user, 
the vendor, the run, and the issuer are positively verified. 

Claim 7 (Original): A method as recited in claim 1, further comprising 
auditing the assets deposited by the vendor. 
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1 Claim 8 (Original): A method as recited in claim 1, further comprising 

2 auditing a sample of the assets paid by the user to the vendor. 

3 

4 Claim 9 (Original): A method as recited in claim 1, further comprising 

5 selecting, at the vendor, a subset of less than all of the assets paid by the user to the 

6 vendor and submitting the subset of assets to an auditor for fraud evaluation. 

7 

8 Claim 10 (Original): Distributed computer-readable media resident at the 

9 issuer, user, and vendor having computer-executable instructions to perform the 

10 method as recited in claim 1. 

u Claim 1 1 (Original): Computers resident at the issuer, user, and vendor that 

13 are programmed to perform the method as recited in claim 1 , 

14 

15 Claim 12 (Original): A method for issuing electronic assets, comprising: 

16 forming a stick of L electronic assets C; (for i=l, L) where each asset 

17 can be derived from a preceding asset in the stick; 

i* signing the stick with a signature of a party issuing the assets; 

to spending a first run of one or more assets from the stick at a first vendor; 

20 and 

21 spending a second run of one or more assets from the stick at a second 

22 vendor* 

23 
24 
25 
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Claim 13 (Original): A method as recited in claim 12, further comprising 

2 storing the stick of electronic assets in a tamper-resistant electronic wallet. 
3 

4 Claim 14 (Original): A method as recited in claim 12, further comprising 

s storing the stick of electronic assets in an electronic wallet constructed with a 

6 secure-processor architecture. 

7 

g I Claim 15 (Original): A method as recited in claim 12, wherein the forming 

9 comprises anonymously issuing the stick of assets using a blind signature protocol. 



10 



n Claim 16 (Original): A method as recited in claim 12, wherein the forming 

12 comprises: 

13 creating the stick of L electronic assets by computing; 

14 

is Q = ti(x) (fbrf=l, ...,Z) 

16 

17 where h(x) is a one-way hashing function of a value x. 

18 

19 Claim 17 (previously amended): A method for issuing electronic assets, 

20 comprising: 

21 forming a stick of L electronic assets C, (for 2=1, L) where each asset 

22 can be derived from a preceding asset in the stick; wherein the forming comprises: 

23 creating the stick of L electronic assets by computing: 



24 



25 Q = hf(x) (for i=l , . . M L) 
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where h(x) is a one-way hashing function of a value jc; 
constructing a withdrawal request having a user identity U t a user 
secret K, a last asset value C L taken from a bottom of the stick, a 
denomination d indicating a value for the assets in the stick, an expiration t, 
and the value L\ and 

signing the withdrawal request with a signature of an issuer: 

10 

1 1 signing the stick with a signature of a party issuing the assets; 

12 spending a first run of one or more assets from the stick at a first vendor; 

13 and 

14 

15 vendor. 

16 

17 Claim 18 (Original): A method as recited in claim 12, wherein the spending 

18 comprises: 

19 signing a first asset from the stick with a signature of the user: 

20 submitting the user-signed asset along with the signed stick to the first 

21 vendor; and 

22 in an event the first asset is accepted, subsequently submitting any 

23 additional assets from the stick without digitally signing them. 

24 
25 



spending a second run of one or more assets from the stick at a second 
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Claim 19 (Original): A method as recited in claim 12, further comprising 
auditing the assets from the first and second runs of assets for fraud. 

Claim 20 (Original): A method as recited in claim 12, further comprising 
auditing a sample of assets from the first and second runs of assets for fraud. 

Claim 21 (Original): A method as recited in claim 12, further comprising 
depositing the first and second runs of assets. 

Claims 22-23 (Canceled) 

Claim 24 (Original): A method for issuing electronic assets, comprising: 
creating, at a user, a stick of L electronic assets by computing: 

C = ti(x) (for i=l 

where h(x) is a hashing function of a value x; 

submitting a withdrawal request from the user to an issuer, the withdrawal 
request having a user identity U, a last asset value C L taken from a bottom of the 
stick, and the value L 9 while omitting any vendor identity; 

signing, at the issuer, the withdrawal request; and 

returning the signed withdrawal request to the user* 
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Claim 25 (Original): A method as recited in claim 24, further comprising 
storing the stick of electronic assets and signed withdrawal request in a tamper- 
resistant electronic wallet. 

Claim 26 (Original): A method as recited in claim 24, further comprising 
storing the stick of electronic assets and signed withdrawal request in an electronic 
wallet constructed with a secure-processor architecture. 

Claim 27 (Original); A method as recited in claim 24, wherein the 
io withdrawal request further has a user secret K 9 a denomination d indicating a value 
u for the assets in the stick, and an expiration u 

12 

13 Claims 28-30 (Canceled) 

14 

15 Claim 3 1 (Original): A method comprising; 

creating, at a user, a stick of L electronic assets by computing: 



16 



17 



19 



C, = ti(x) (fori=l, ...,£) 



20 where h(x) is a hashing function of a value x\ 

21 submitting a withdrawal request from the user to an issuer, the withdrawal 

22 request having a user identity £/, a user secret K t a last asset value C L taken from a 

23 bottom of the stick, a denomination d indicating a value for the assets in the stick, 

24 an expiration t, and the value L; 

25 signing, at the issuer, the withdrawal request: 
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1 

2 SrfU, K t d, Q, U L) 

returning the issuer-signed withdrawal request to the user; 

5 initiating payment of one or more assets from the stick to a vendor having 

6 an identity V\ 

? concatenating, at the user, the vendor identity with a first asset Cj to be 

8 spent from the stick to form a payment request, and a depth D indicating a distance 

9 of the first asset from the bottom of the stick; 

10 signing the payment request with a signature of the user: 
u 

12 Sv(Cj, A VI) 

13 

u submitting the user-signed payment request along with the issuer-signed 

is withdrawal request to the vendor, 

i6 accepting the first asset as payment at the vendor in an event that the user 

1? and the issuer are verified; 

is subsequently passing any additional assets from the stick as payment to the 

19 vendor without digitally signing them with the user's signature; 

20 concatenating, at the vendor, the user-signed first asset, a last asset spent 

21 from the stick Ck, and a run length RL of assets beginning with the first asset Cj 

22 and ending with the last asset Ck to form a deposit request; 

23 signing the deposit request with a signature of the vendor 



24 



25 SyfSu(Q), Ck, RL) 



10 



PAGE 12(23 * RCVD AT 2/24/2005 4:48:51 PM [Eastern Standard Time] * SVR:USPTO-EFXRF-1/0 * DNIS:S729306 ' CSID:509 323 8979 * DURATION (mm<s):05-32 



FEB 24 2005 14: 10 FR LEE - HAYES PLL 509 323 8979 TO 17038729306 P. 13/23 



2 submitting the vendor-signed deposit request along with the issuer-signed 

3 withdrawal request to the issuer; and 

4 crediting a vendor account with the run of assets in an event that the user, 

5 the vendor, and the issuer are verified 

6 

7 Claim 32 (Original): A method as recited in claim 31, further comprising 

s randomly selecting an asset from the assets paid by the user to the vendor and 

9 submitting the selected asset for audit. 

10 

n Claim 33 (Original): A method as recited in claim 31, further comprising 

12 auditing the assets deposited by the vendor with the issuer. 

13 

H Claim 34 (Original): A method for anonymously issuing electronic assets, 

is comprising: 

(6 creating, at a user, a stick of L electronic assets by computing: 

17 

is Ci = h l (x) (for/=l, ,..,L) 

19 

20 where h(x) is a hashing function of a value x; 

21 blinding the stick using a random value p> where: 

22 

23 Blind Stick = p e C L mod N 

24 

25 where Q is a bottom asset on the stick; 
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submitting a withdrawal request from the user to an issuer, the withdrawal 
request having the blind stick and the value L; 

signing, at the issuer, the withdrawal request by computing: 

c = (p Q Cjf = p L C L lf mod N 

where e and / are public and private variables known by the issuer and e is 
known to everyone; 

returning the signed withdrawal request to the user; 
deriving a new bottom asset by computing: 

CF-c/jf-modK 

Claim 35 (Original): A method as recited in claim 34, further comprising 
storing the blind stick of electronic assets and signed withdrawal request in a 
tamper-resistant electronic wallet. 

Claim 36 (Original): A method as recited in claim 34, further comprising 
verifying the bottom asset by computing Cif independently and comparing a result 
to the new bottom asset derived in said deriving (C/^) 

Claim 37 (Original): A method as recited in claim 34, further comprising 
storing the blind stick of electronic assets and signed withdrawal request in an 
electronic wallet constructed with a secure-processor architecture. 
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Claim 38 (Original): A method as recited in claim 34, further comprising 
2 spending an asset from the blind stick by first sending the new bottom to a vendor 
for verification. 



3 



5 Claims 39-41 (Canceled) 

6 

7 Claim 42 (Withdrawn): A method for handling electronic coupons, 

s comprising: 

9 creating dual sticks of corresponding coupons including a user stick located 

10 at the user and a vendor stick located at the vendor; 

11 referencing at least one coupon in the user stick and at least one 

12 corresponding coupon in the vendor stick; 

13 upon granting or spending a coupon, changing reference to a different 
u coupon in the user stick and a different corresponding coupon in the vendor stick; 
is and 

i6 swapping information between the user and the vendor to verify that the 

n coupons being referenced in the user stick and the vendor stick correspond to one 

is another. 

19 

20 Claim 43 (Withdrawn): A method as recited in claim 42, wherein the 

21 referencing comprises: 

22 using a first user pointer to reference a newest coupon in the user stick and 

23 a second user pointer to reference an oldest unused coupon in the user stick; and 

24 
25 
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using a first vendor pointer to reference a newest coupon in the vendor stick 
and a second vendor pointer to reference an oldest unused coupon in the vendor 
stick. 

Claim 44 (Withdrawn): A method as recited in claim 43, wherein the 
changing comprises, upon granting a newer coupon, moving the first user pointer 
and the first vendor pointer to reference the newer coupon. 

Claim 45 (Withdrawn): A method as recited in claim 43, wherein the 
changing comprises, upon spending the oldest coupon, moving the second user 
pointer and the second vendor pointer to reference a next oldest coupon. 

Claim 46 (Withdrawn): A method as recited in claim 42, wherein the 
swapping comprises exchanging data indicating which coupons are being 
referenced in the user stick and the vendor stick. 

Claim 47 (Withdrawn); Computer-readable media resident at the user 
and the vendor having computer-executable instructions that perform the method 
as recited in claim 42. 

Claim 48 (Withdrawn): Computers resident at the user and the vendor 
that are programmed to perform the method as recited in claim 42. 

Claim 49 (Withdrawn): A method for handling electronic coupons, 
comprising: 
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storing a first set of coupons in a user-based data structure maintained at a 



user; 



storing a second set of coupons in a vendor-based data structure maintained 
at a vendor, the second set of coupons corresponding to the first set of coupons; 

using first and second user pointers to reference a first and last coupon in 
the user-based data structure; 

using first and second vendor pointers to reference a first and last coupon in 
the vendor-based data structure; 

upon earning a new coupon, 

adding the new coupon to the user-based stick; 

modifying the first user pointer at the user-based data structure to reflect the 
new coupon; 

informing the vendor; 

updating the first vendor pointer at the vendor-based data structure to reflect 
that the user-based data structure is referencing the new coupon; 

upon spending a current coupon from the user-based data structure, 
submitting the current coupon to the vendor; 

evaluating, at the vendor, whether the coupon is acceptable and if 
acceptable, modifying the second pointer at the vendor-based data structure to 
reflect expenditure of the coupon; 

informing the user; 

updating the second user pointer at the user-based data structure to reflect 
expenditure of the current coupon. 
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Claim 50 (Withdrawn): An architecture for managing electronic 
coupons, comprising: 

a user-based data structure embodied on a computer-readable medium, the 
user-based data structure storing one or more coupons; 

a first user pointer to an oldest coupon in the user-based data structure; 

a second user pointer to a newest coupon in the user-based data structure; 

a vendor-based data structure embodied on a computer-readable medium, 
the vendor-based data structure storing one or more coupons associated with the 
coupons stored on the user-based data structure; 

a first vendor pointer to an oldest coupon in the vendor-based data 
structure; 

a second vendor pointer to a newest coupon in the vendor-based data 
structure; 

wherein the user-based data structure and the vendor-based data structure 
are concurrently maintained so that (1) modification of the first user pointer to 
reference another coupon in the user-based stick results in updating and 
verification of the first vendor pointer to reference an associated coupon in the 
vendor-based stick and (2) modification of the second vendor pointer to reference 
a different coupon in the vendor-based stick results in updating and verification of 
the second user pointer to reference an associated coupon in the user-based stick. 



Claim 51 (Original): An electronic asset system comprising: 
an issuer wallet having a processor and storage, the issuer wallet digitally 
signing with an issuer's signature a composite of user-provided data items 
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including a user identity, a bottom asset from a bottom of a stick of electronic 

2 assets, and a length of the stick; 

3 a user wallet having a processor and storage to store the stick of electronic 

4 assets and issuer-signed composite and to spend one or more assets from the stick 

5 at one or more vendors, the user wallet spending one or more assets by digitally 
signing with a user's signature a first asset from the stick to be spent and passing 

7 the user-signed first asset along with the issuer-signed composite to the vendor for 

s verification; whereupon verification, the user wallet subsequently passes any 

o additional assets to be spent without user signature to the vendor; and 

io a vendor wallet having a processor and storage to store one or more assets 

u spent by the user wallet/the vendor wallet depositing the assets collected from the 

12 user wallet by digitally signing with the particular vendor's signature a composite 

13 of data items including the user-signed first asset and a last asset passed in the 

14 stick received from the user wallet and passing the vendor-signed composite along 

15 with the issuer-signed composite to the issuer wallet for verification. 

16 

n Claim 52 (Original): An electronic asset system as recited in claim 51, 

ig wherein the issuer wallet, the user wallet, and the vendor wallet are tamper- 

19 resistant 
20 

21 Claim 53 (Original); An electronic asset system as recited in claim 51, 

22 wherein the issuer wallet, the user wallet, and the vendor wallet are tamper- 

23 resistant constructed with a secure-processor architecture. 

24 
25 
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Claim 54 (Original); An electronic asset system as recited in claim 51, 
wherein the issuer wallet signs the composite using a blind signature protocol. 

Claim 55 (Original): An electronic asset system as recited in claim 51, 
further comprising an auditing system to audit the electronic assets to detect 
e whether assets have been used in a fraudulent manner. 

8 Claim 56 (Original): An electronic asset system as recited in claim 51, 

9 further comprising a probabilistic auditing system to sample a subset of less than 

10 all electronic assets to detect whether assets have been used in a fraudulent 

11 manner. 

12 

13 Claim 57 (Original); An electronic wallet having memory and a processor, 

14 the electronic wallet being programmed to: 

15 create a stick of L electronic assets by computing; 

16 

17 Q=h*(x) (for^l.,,.,1) 
ts 

is> where h(x) is a hashing function of a value x; 

io form a withdrawal request having a user identity £/, a last asset value C L 

21 taken from a bottom of the stick, and the value L, while omitting any vendor 

22 identity; 

23 submit withdrawal request to an issuer and receive the withdrawal request 

24 back with an issuer signature; and 

25 store the signed withdrawal request and the stick* 
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Claim 58 (Original); An electronic wallet having memory and a processor, 
the electronic wallet being programmed to: 

create a stick of L electronic assets by computing: 

Q~h*(x) (for i=l, ... y L) 

7 

s where h(x) is a hashing fiinction of a value x; 
o form a withdrawal request having a user identity £/, a last asset value C L 

10 taken from a bottom of the stick, and the value L, while omitting any vendor 

11 identity; 

12 submit withdrawal request to an issuer and receive the withdrawal request 

13 back with an issuer signature; 

14 store the signed withdrawal request and the stick; 

15 form a payment request for payment of one or more assets from the stick to 

16 a vendor having an identity V 9 the payment request having the vendor identity V 

1 7 and a first asset Cj to be spent from the stick; 
is sign the payment request: 

19 

20 Su(Cj p VI); and 

22 submit the signed payment request along with the signed withdrawal 

23 request to the vendor. 

24 

25 Claims 59-60 (Canceled). 
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